MikroTik

resca

Linux device should produce both a private key and a public key. In this case, there is no way to have just one peer for both Android and Linux. Thus the statement that linux had the wrong private key makes no sense to me. Linux had the wrong private key while I placed it trusting the configuration...

resca

FIXED!!! The idea from the Fedora forum (double encryption) was not winning! The problem was the wrong Private Key in linux wg0.conf. Basically, while the mikrotik produced configuration file (and QR code) is applicable for Android, it doesn't work for Linux. Once as Private Key I used the same one ...

resca

UPDATE: the present opinion of Fedora experts is that the Handshake Initiation packet is encrypted ... twice!

resca

The standard system log in RouterOS for Wireguard lacks logging at the packet level so you need to use WinBox "Packet Sniffer" to trace the Wireguard ingress/egress traffic. I used it and I see the incoming "Handshake Initiation" packet coming in. If the Linux machine's interfac...

resca

When testing your Linux WireGuard Config following link provides you with excellent clues Yes, I am between B1 and B2. I am afraid English is not my mother tongue and I am not able to explain something from the very beginning: -The handshake packet is sent by Linux and it is received by MT: i see i...

resca

I had a quick glance at the configuration, though only for WireGuard and the firewall. Everything seems to be in order, and considering that the mobile devices are working, there probably isn't any issue with your RB2011. Thus, unfortunately you'll have to continue troubleshooting with your Linux b...

resca

Yes full config please. Also 0.0.0.0/0 is fine on the android but NOT on the mikrotik This is the full config. http://www.rescas.eu/listing/download/public/pippo.zip ... or you need it pasted in full text into a code block (quite long!)? Can you explain, in few words, while android connects fine, w...

resca

From the little revealed: Looking at your linux settings. - missing keep alive Mikrotik. Allowed IPs 0.0.0.0/0 is wrong. Best to post complete MT config minus sensitive bits. I ignored the post thus far due to this omission. The problem is not yours its the lack of guidance provided by the site, to...

resca

Too funny Larsa, I wonder how many times that needs to be stated, to "See the Light" regarding ensuring first posts are relevant . :-) Death by a 1000 cuts LOL.. I simply dont help those that dont post the required information anymore. I tried to make it better but failed. :-) I worked in...

resca

To check how the raw Wireguard packets might appear on the Mikrotik, use Winbox by going to "Tools -> Packet Sniffer". Select the WAN interface and port 13231. Click on [Apply], [Start], and finally the [Packets] button to open the window where the tracing is displayed. Remember to press ...

resca

Hi, are you sure the config is correct? No, I am quite sure it isn't! First of all you do not need to have the peer private key on the mikrotik. Yes, I do not need, and this is possibly the point! Even if I don't need, when I configure the peer, Mikrotik is so kind to prepare for me a sample of the...

resca

@larsa, I understand my description is not complete! Let me say in other words: -I used WireShark on Linux and I see the "Handshake Initiation" transmission. -I used Packet Sniffer on Mikrotik and I see the incoming "Handshake Initiation" packet. -I added an Action-log on my fire...

resca

1) Yes, always, to save my preferred layout and re-use it specifying it in the command line. 2) To save and reload the windows layout. 3) Publish the .viw file layout and/or make it readable/editable. 4) No: layout would be better, but this is marginal. 5) I learned a lot of people don't know what t...

resca

Hello, a few days ago, I configured my Mikrotik router with Wireguard to act as a server for some of my devices. I then installed Wireguard on two Android phones, using the parameters that are automatically proposed when generating the Peer on the router (I just had to add the Endpoint) and they bot...

resca

I entered my case on the subsection Beginner Basics , not in the section Experts , for this reason your kind reply sounds like a: you cannot ! I may have an idea and I for sure can find documentation to write and run a script, but I certainly cannot add a script to your dhcp/pppoe client on the Rout...

resca

My MikroTink router is running v7.12.1, I managed to create a IKEv2 VPN to remotely connect my Android phone thanks to the useful script IKEv2-server-autoscript.rsc found on Github and it used to wok fine for several days. Than suddenly stopped to work. After a very hard (for me!) investigation, I f...

resca

Thanks everybody for the great help.
Useful forum.!

resca

On my MikroTik router, I enabled VPN from the quick config page and I can access my home network from my Android phone or even form a remote Linux box. On the router, I also enabled a static DNS that resolves the local names (xxx.lan style), it works for local devices and it falls back to the provid...

resca

You are several steps ahead of me!!!
How did you create the .ovpn file?
And, my further question would be: where did you get this .secret file?
I just generated ca and branch certificates and the branch key, nothing else.
Thanks.

resca

If your hosts are windows based

Unfortunately, two Android phones, or one Android and one ESP or a Linux or any combinations of them are not Windows hosts. The problem is between any two units on the same WiFi network and, in my case, I have no Windows boxes on the WiFi.

resca

I am very surprised MikroTik nor any external expert gave some help for a so solid and blocking problem. I must say I am very disappointed a potentially so nice product, rich of features, is so poor in documentation, not to say about the not existing Customer Support. That said, considering a lot of...

resca

f possible may you share an export of the device I want to replciate it on my device . Here it is (I hope!) The client2client communication generally is working without any additional effort on the routeros I totally agree. Let me add an other couple of considerations: -in the past, I had a MikroTi...

resca

did you try to modify the configuration changing bridge-mode=disabled Yes, unfortunately I already tried that and it is in the current, not working, configuration. After my first post, I made several additional tests and I can say that ESP is meaningless: I have almost the same behaviour with any t...

resca

Basic configuration is: one WiFi access point, one P.C. connected to it via Ethernet cable, one ESP386 and one Android phone connected to the A.P. via WiFi. Ping is enough to see the problem. Ping from Android to P.C. is fine. Ping form the A.P. console to the WiFi devices is fine and immediate. Pin...

resca

Thanks for the useful help!

resca

So, I guess I am the only one in the world with a problem with two devices connected to the same Mikotik A.P.?

resca

Hello everybody! More details follow, but I start with: YES, I do have default-forwarding=yes! One WiFi device connected to a MikroTik 951Ui-2HnD running RouterOS 6.38.5 cannot be accessed from ANY other device connected to the same 951Ui-2HnD, but works fine with ANY device connected to one Etherne...

resca

>Tools to trouble shoot are Tools > Torch and Tools > Packet sniffer. >Torch temporarily shows what interfaces packets are coming and going. Ok, I don't think torch is very useful in my case and with sniffer I just see: wlan1 9.366 49 <- CC:3A:61:8C:2F:98 FF:FF:FF:FF:FF:FF 10.3.50.51: who has 10.3.5...

resca

I have a 951Ui-2HnD, ROS 6.38.5, acting as a PPPoE Router with some local connected PCs and some devices connected through WiFi. Everything works fine but I have a problem with WiFi I cannot investigate while I cannot find the correct tool (if any) to check what is going on. Let's see the significan...

resca

Yes, thanks, finally I did it. With the help of the old and good "windiff" that shows the differences between two ascii files and similar routes, it was not so hard. I just faced some duplicate commands in the DHCP config: not too bad to identify and remove.

resca

I have an HexLite with a quite complex configuration I have perfected for my needs over the years, and it works perfectly. Now I bought a new RB951Ui-2hND and I managed to configure it as a pure Access Point. Presently it is connected to one port of the Hexlite. Noticing the RB951Ui-2hND is exactly ...

resca

Maybe
Code: Select all
/tool fetch url="http://www.example.com/" mode=http
will help you

Yes, that is exactly what I need. Just tested: works fine. Thanks!

resca

It's a couple of days I am searching Internet and THIS forum, but I cannot find anyone asking this... I simply need to access every two o so minutes a specific page on a web server (http->PHP). I really don't need to capture/process the answer while my need is just to activate the PHP script on the ...

Search found 33 matches

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: Wireguard from Linux not working [SOLVED]

Re: User poll about using Winbox

Wireguard from Linux not working [SOLVED]

Re: strongSwan and dynamic IP address

strongSwan and dynamic IP address

Re: vpn devices don't see local dns

vpn devices don't see local dns

Re: OpenVPN Connect v3.2.5 on Android not connecting

Re: Two Devices on the same WiFi don't talk together

Re: Two Devices on the same WiFi don't talk together

Re: Two Devices on the same WiFi don't talk together

Re: Two Devices on the same WiFi don't talk together

Two Devices on the same WiFi don't talk together

Re: Two devices on the same WiFi cannot talk

Re: Two devices on the same WiFi cannot talk

Two devices on the same WiFi cannot talk

Re: Sniffing WiFi traffic

Sniffing WiFi traffic

Re: Merge configuration lines

Merge configuration lines

Re: Accessing a web server [through script]

Accessing a web server [through script]